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TRANSMISSION CONTROLS ON E-MAILS 

This invention relates to method and apparatus for applying transmission 
controls to e-mails, over a network providing access to a very large 
5 number of users, primarily publicly usable networks such as the internet, 
but also an intranet. 

BACKGROUND TO THE INVENTION 

With current e-mail transmission systems once an instruction to send an 
e-mail to a specified recipient address has been given it is generally not 
possible to prevent the e-mail being received by that address if the sender 
has second thoughts as to what should have been sent and to whom. This 
is particularly annoying when the sender knows that the intended 
recipient probably has not yet viewed the content of the e-mail. 

Quite often the circumstances which led to the sending of the e-mail can 
change shortly after the e-mail was sent, and the sender of the e-mail 
would like the opportunity to revise or even withdraw the message sent. 

In sending e-mails via the internet, because of the extremely large 
number of users and consequently e-mail addresses, any mistake in an 
e-mail address will probably result in the e-mail being received by 
20 someone who happens to have the address that was wrongly given. This 
can sometimes have serious consequences because important confidential 
information may be released to an unscrupulous recipient who may then 
seek to make use of that information for profit. 




SUMMARY OF THE INVENTION 



In brief, we have appreciated that with advantage an e-mail system can 
send references to locations, for example URLs, Uniform Resource 
Locators, rather than sending the message itself, and the message content 
can be automatically placed into a message store, e.g. a web server, on 
the sender side. The reference notification sent to the desired recipient/s 
points to this location. Since the actual message content still resides with 
the sender, the sender can have a degree of control over that information 
even after the message has been sent. 

According to one aspect of the invention we provide a method of 
communicating an e-mail text message over a network from a user 
terminal to an intended recipient terminal at a remote location, 
characterised by the steps of: 

(a) the user terminal specifying a confidential message store address 
of a server that is capable of being accessed by the recipient 
computer via the network; 

(b) the user terminal transmitting said e-mail text message to said 
store address to reside therein; 

(c) the user terminal transmitting a notification over the network to 
the recipient, said notification incorporating said selected store 
address and an instruction to the intended recipient to communicate 
with said store address; and 

(d) said recipient terminal accessing said store address to retrieve 
said text message. 
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The message store address may be a pre-allocated address or it may be an 
address that is selected from a range of possible addresses. 

It can sometimes be more important urgently to notify an intended 
recipient of an e-mail than the actual content of the e-mail itself. There 
can, therefore, be occasions on which it is preferred that step (c) is 
performed prior to step (b), and the user's terminal is preferably 
configured to provide for this option. Thus, the reference to location 
may on occasion be transmitted to the recipient even before the e-mail 
message has been composed. 

Although the user terminal might be a mobile telephone, preferably the 
user terminal is a PC, personal computer (comprising CPU, ROM, RAM, 
input/output and non-volatile memory). 

The connection between the personal computer and the internet can be 
through a modem and telephone line via a private network service 
15 provider that is directly connected to the internet, through an ISP, 
internet service provider, who is directly connected to the internet, or via 
a direct high-speed data connection. 

The server is preferably incorporated into the PC. This has the 
advantage, over use of a remote server, of the PC more easily monitoring 
20 access of the store address, and implementing any authentication controls 
which may be considered desirable over the accessing of the data from 
the store address. 

The arrangement may permit unlimited accessing of the store address, 
but preferably only a predetermined number of access events is permitted 
25 which may be one only. 
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It may, for example, be desired that only a small number of people, from 
a larger pool of people to whom the notification of an available e-mail 
has been sent, are required to read a message before the message is to be 
deleted from the store address, for example the limited number of people 
5 to be given free tickets to an event. 

The method may comprise an authentication step which must be 
successfully completed prior to the recipient terminal being permitted to 
access the store address, said authentication step comprising an 
authentication communication between the recipient terminal and the 
server, the server determining from the identity proffered by the user 
terminal whether or not to allow access to the data. 

According to a second aspect of the invention we provide a computer 
terminal capable of transmitting data over a network to a remote recipient 
computer, characterised in that the computer terminal is configured such 
15 that on inputting of an instruction to cause an e-mail text message to be 
transmitted to a recipient computer, the transmitting terminal instead 
selects a confidential message store address on a server that is capable of 
being accessed via the network by the recipient computer, the 
transmitting terminal transmits the text message to that store address, and 
20 sends a notification via the network to the recipient computer, the 
notification providing information that the text message is available to the 
recipient computer by accessing the particular store address. 

In order to provide the sender with some time to review and possibly 
change an e-mail message that has been 'sent', the computer terminal 
25 may comprise a delay timer for delaying the transfer of data from the 
computer terminal to the message store address until a predetermined 
time has elapsed after the terminal attempted to issue the alert message to 
the recipient computer. 
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The e-mail text message may have an attachment associated therewith. 

According to a third aspect of the invention we provide a computer 
readable program code executable by a user terminal to cause the 
following steps to be executed by said user terminal in response to a user 
5 command to said user terminal to transmit an e-mail text message from 
said user terminal to a recipient terminal, said steps comprising: 

(a) the user terminal specifying a confidential message store address 
of a server that is capable of being accessed by the recipient 
computer via the network; 

(b) the user terminal transmitting said e-mail text message to said 
store address to reside therein; and 

(c) the user terminal transmitting a notification over the network to the 
recipient, said notification incorporating said selected store address and 
an instruction to the intended recipient to communicate with said store 
address. 

BRIEF DESCRIPTION OF THE DR AWINGS 

Some embodiments of the invention will now be described, by way of 
example only, with references to the accompanying drawings in which :- 

Figure 1 is a schematic flow diagram showing an e-mail 
20 communication procedure in accordance with the invention, 

Figure 2 is a schematic of the nodes involved in the communication 
procedure of Figure 1 , 
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Figure 3 is a schematic of a modification to the schematic of 
Figure 2, and in accordance with the invention, in which a mobile 
telephone is used by the sender of an e-mail, and 

Figure 4 is a schematic similar to Figure 2 but showing the use of a 
personal web server. 

DESCRIPTION OF PREFERRED EMBODIMENTS 

With reference to Figure 2, PCI is a personal computer with which a 
user desires to send an e-mail message to a recipient address which is the 
address associated with a personal computer PC2 which is remote from 
PCI . Internet service providers ISP1 and ISP2 provide links respectively 
between PCI and the internet, and PC2 and the internet. ISP1 also 
provides a web server over which PCI has certain rights in relation to an 
allocation of storage sites on the web server. 

As shown in Figure 1, when the user of PCI desires to send an e-mail to 
the intended recipient at PC2, the composed e-mail message is first 
transmitted by way of modem Ml to a web server WS1 provided by an 
internet service provider ISP1. WS1 contains a plurality of storage 
locations which are available for use by PCI, and a selection of one of 
these allocated storage locations is selected by software in PCI 
performing a random selection procedure amongst the addresses of the 
allocated storage locations , and the e-mail message is read into that 
selected location. 

As described so far, in principle the data in the chosen storage location is 
available to anyone having a connection with the internet, but they do not 
know the address, and moreover they are not aware of how to satisfy an 
authentication procedure that would allow them access to the data. 
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Once the e-mail message has been read into the web server WS1 a 
notification, in the form of a reference, is then sent to PC2, via modem 
Ml, ISP1, an internet connection, ISP2 and modem M2, to inform PC2 
that an e-mail message from the named user (or organisation) of PCI has 
5 been stored at the particular storage address of WS1 . 

When the user of PC2, the intended recipient, checks PC2 to see what e- 
mails have been received, and sees that an e-mail has been 'sent* by the 
user of PCI, when the user then attempts to open-up the e-mail the 
opening-up procedure will cause PC2, by appropriate software, to 
attempt to access the specific storage location of WS2. 

Preferably the attempt to access the specific storage location of WS1 is 
accompanied by the supply to ISP1 of a suitable proof of identity of the 
intended recipient of the e-mail, and this proof of identity is checked by 
ISP1 before permitting PC2 to access the stored e-mail message. 

The proof of identity could contain a digitally signed hash of the actual e- 
mail message, the hash having been included in the reference 
notification. In the circumstances that PCI incorporates an integral web 
server then the procedure is different, as follows: 

In the flow diagram of Figure 1, and as just described, the first step in 
20 the procedure involves storage of the e-mail message in the selected 
storage location, and the second step is to notify the recipient computer 
of the existence of an e-maih However, there can be an advantage to the 
user in some circumstances of first notifying the intended recipient of the 
proposal to provide an e-mail, before the e-mail message has been 
25 finalised for sending to the selected storage location. 
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It will be appreciated that, as far as the recipient computer PC2 is 
concerned, it has received an e-mail notification at the time at which it 
receives the notification from PCI. 

Even once the reference notification has been transmitted to PC2, the 
5 sender is able to amend or replace the initial message stored in the 
specific storage location. 

Figure 3 shows a modification to the system of Figure 2 in which a 
mobile telephone MOB is used by the sender to communicate with the 
internet by way of a base station BS1. 

10 Figure 4 shows a modification to the system of Figure 2. Corresponding 
reference numerals have been applied to corresponding components. The 
system of Figure 4 differs from that of Figure 2 in that the web server 
WS1' is a personal web server, such as MICROSOFT™ PWS, running on 
PCI. 

15 It will be appreciated that the foregoing embodiments of the invention 
can provide the following benefits:- 

i) deletion of an e-mail message sent in error if receiver has not 
already viewed it, 

ii) authentication prior to read, 
20 iii) archive message immediately, 

iv) insist on not receiving it because they do not access it, 



v) guarantee delete after read/x people have read it. 



